Release Notes NCOS 7.21 - d2c9o94y5j661e.cloudfront.net

Release Notes NCOS 7.21.80

NetCloud OS 7.21.80 Release Notes (August 2021)

Availability and entitlement to NetCloud OS releases requires an active Cradlepoint NetCloud Service subscription. For more information about the Cradlepoint NetCloud Service click .HERE

Regarding NetCloud OS manual download availability: NetCloud OS (NCOS) releases 7.1.0 and greater are no longer available for manual or offline download. NCOS upgrades are performed via NetCloud Manager with an active NetCloud Service subscription. For more information and NCOS upgrade best practices click .HERE

Updating NCOS and WAN bandwidth: NCOS updates performed through NetCloud Manager will result in an internet download consuming WAN bandwidth. The size of this update file can vary depending on the specific hardware platform to be updated as well as the specific NCOS version selected for the update. For most Cradlepoint endpoints, the NCOS update can be approx. 15-20MB.

NOTE: The exception to this approximate file size is the CR4250, which can have update file sizes up to 150MB.

Endpoints supported & tested:

AER2200

AER1650

AP22

CBA850

CBA550

CR4250

Cradlepoint Virtual Router

E3000

E300

E100

IBR1700

IBR900/IBR950

IBR600B/IBR650B

IBR600C/IBR650C

IBR200

L950

R500-PLTE

R1900

W1850

W2000

W2005

https://cradlepoint.com/subscription

https://customer.cradlepoint.com/s/article/Router-Firmware-Upgrades-Best-Practices

W4005

New features:

Unless specifically noted below, please review the NetCloud service page for details on which features are available in each service plan and endpoint. https://cradlepoint.com/products/netcloud-service/

Wi-Fi Monitor Mode for capturing wireless traffic added on supported routers.For more information, please see the following article. https://customer.cradlepoint.com/s/article/Configuring-Wi-Fi-Monitor-Mode

Hotspot Services (Captive Portal) now supports secure UAM by conducting UAM transactions over HTTPS instead of HTTP.For more information, please see the following article. https://customer.cradlepoint.com/s/article/Enabling-Secure-Captive-Portal-UAM-Transactions

Additional UI & Usability changes:

The Smart Operator Selection (S.O.S.) scoring algorithm will now ignore 2G-only networks so they will not be selected. If no other cellular service type is available, 2G connections will be still be made as a last resort.

Disabled ability to configure custom prompt and banner strings for ssh sessions, as some strings would cause ssh sessions to automatically disconnect.

Defects fixed:

(E100) bootloader updated to mitigate potential boot issues if bad blocks are present in the root partition.

(All) OSPF configuration with ‘default originate always’ dropped the E2 route.

(All) Selecting an existing certificate for CA fingerprint during SCEP certificate enrollment with Microsoft NDES did not work.

(All) BGP route map using default originate could result in other routes being effected.

(All) IPsec issue that could occur when using IPSec configured for IKEv1 & IKEv2 with MOBIKE enabled.

(All) Cellular data usage counter was not accurate following a graceful device reboot.

(All) Devices with Default APN setting on Verizon would take a long time to re-establish a connection if the connection signal was lost for an extended period of time.

Security issues:

Note: All customers are reminded that are necessary for router and changing the default Administration (login) and WiFi passwords network security. The default passwords are unique, but are not as safe as a strong password that only you know. The security of the Internet depends on your cooperation.

No known security issues in this release.

For more information regarding security and vulnerability events please visit the public Cradlepoint Security & Trust web page https://cradlepoint.com/about-us/trust/

Known issues:

Scenario:For all endpoints with an embedded 5GB modem and users are monitoring the status of carrier aggregation registration in local UI.

Failure:LTE carrier aggregation registration in local UI status will not be displayed even when carrier aggregation registration is uplink present and active.

Reason for Failure:Modem module level commands that provide carrier aggregation registration status are not working reliably.

Workaround :This will be resolved in a future 5GB modem firmware maintenance release and/or future NetCloud OS release using different modem commands.

https://cradlepoint.com/products/netcloud-service/

https://customer.cradlepoint.com/s/article/Configuring-Wi-Fi-Monitor-Mode

https://customer.cradlepoint.com/s/article/Enabling-Secure-Captive-Portal-UAM-Transactions

https://customer.cradlepoint.com/s/article/Enabling-Secure-Captive-Portal-UAM-Transactions

https://cradlepoint.com/about-us/trust/


Scenario:Modifying an existing Auto VPN network to add additional spokes devices.

Failure:After completing the edit for adding additional spokes the Auto VPN hub device could enter a configuration sync suspend state.

Reason for Failure:Missing device-type validation for GRE tunnels.

Workaround :Downgrade to a NetCloud OS release 7.21.60 (June 2021) or prior. This issue will be resolved in NetCloud OS release 7.21.90 (Sept 2021).

Scenario:For all endpoints using the IP Verify feature in conjunction with the AS Path Prepend functionality in Route Maps.

Failure:When the BGP Route Map contains more than two AS prepend paths.

Reason for Failure:Failure in underlying router daemon due to change in new version.

Workaround :Downgrade to a NetCloud OS release 7.21.70 (July 2021) or prior. This issue will be resolved in a future NetCloud OS release.

Notes:

(All) NetCloud OS 7.2.70 release, and newer, no longer officially supports 3rd party USB attached 3G/4G cellular modems. USB cellular modems currently in-use will continue to function, however their support and functionality going forward is no longer guaranteed. 3rd party Ethernet attached modems continue to be supported as "Ethernet WAN" sources only, no support for 3rd party Ethernet modems as "Modem WAN" in Connection Manager.

(AER1600) NetCloud OS 7.2.70 release is the last supported release for the AER1600 router. The AER1650 (non Wi-Fi version) continues to support newer releases.

For more information, please see the following article regarding the Cradlepoint End of Life policy. https://customer.cradlepoint.com/s/article/End-of-Life-EOL-Policy-Guidelines

(IBR1100, IBR1150) NetCloud OS 7.21.70 release is the last supported release for the IBR1100 (Wi-Fi version), and IBR1150 (non Wi-Fi version) routers.

For more information, please see the following article regarding the Cradlepoint End of Life policy. https://customer.cradlepoint.com/s/article/End-of-Life-EOL-Policy-Guidelines

Modems supported & tested:

Cradlepoint Cellular Modems (Embedded & Modular)

Cradlepoint AER16x0LPE-AT / AT&T (USA)

Cradlepoint AER16x0LPE-GN / T-Mobile, US Cellular (USA); Generic (North America)

Cradlepoint AER16x0LPE-SP / Sprint (USA)

Cradlepoint AER16x0LPE-VZ / Verizon (USA)

Cradlepoint AER16x0LP4 / AT&T, T-Mobile, Verizon (USA)

Cradlepoint AER22x0-600M / AT&T (T-Mobile, Canada); Sprint, Verizon (USA); Generic (US Cellular (USA), Telstra (AU), Europe, Australia, NZ)

Cradlepoint AER2200-1200M / AT&T, Verizon (USA)

Cradlepoint AER2200-1200M-B / AT&T (USA), Verizon (USA); NoAmerica GN (T-Mobile USA, Canada), EuAPAC GN (Europe, Australia)

Cradlepoint CBA550-150M-D / AT&T, T-Mobile, Verizon (USA); Generic (Canada)

Cradlepoint CBA550-150M-E / Generic operators (Europe, APAC)

Cradlepoint E300-C4D / AT&T, T-Mobile, Verizon (USA); Generic (Canada)

Cradlepoint E300-C18B / AT&T (USA), Verizon (USA); NoAmerica GN (T-Mobile USA, Canada), EuAPAC GN (Europe, Australia)


https://customer.cradlepoint.com/s/article/End-of-Life-EOL-Policy-Guidelines




Cradlepoint IBR200-10M-VZ / Verizon (USA)

Cradlepoint IBR200-10M-B-AT / AT&T (USA)

Cradlepoint IBR200-10M-C-SP/ Sprint (USA)

Cradlepoint IBR200-10M-D-GN / Generic operators (Europe)

Cradlepoint IBR200-10M-E-GN / Generic operators (Australia)

Cradlepoint IBR6x0B-LP4 / AT&T, T-Mobile, Verizon (USA)

Cradlepoint IBR6x0C-LPE-AT / AT&T (USA)

Cradlepoint IBR6x0C-LPE-GN / T-Mobile (USA); Generic (North America)

Cradlepoint IBR6x0C-LPE-SP/ Sprint (USA)

Cradlepoint IBR6x0C-LPE-VZ / Verizon (USA)

Cradlepoint IBR6x0C-150M-B-EU / Generic operators (Europe)

Cradlepoint IBR6x0C-150M-C-AU / Generic operators (Australia)

Cradlepoint IBR6x0C-150M-D / AT&T, T-Mobile, Verizon (USA); Generic (Canada)

Cradlepoint IBR900LPE-VZ / Verizon (USA); also certified on AT&T (USA), Sprint (USA), and Generic (North America)

Cradlepoint IBR9x0LP5 / Generic (APAC)

Cradlepoint IBR9x0LP6 / AT&T, Sprint, T-Mobile, Verizon (USA); Generic (North America, Europe)

Cradlepoint IBR9x0-600M / AT&T (T-Mobile, Canada); Sprint, Verizon (USA); Generic (US Cellular (USA), Telstra (AU), Europe, Australia, NZ)

Cradlepoint IBR900-1200M / AT&T, Verizon (USA)

Cradlepoint IBR900-1200M-B / AT&T (USA), Verizon (USA); NoAmerica GN (T-Mobile USA, Canada), EuAPAC GN (Europe, Australia)

Cradlepoint IBR11x0LPE-AT / AT&T (USA)

Cradlepoint IBR11x0LPE-GN / C-Spire, T-Mobile, US Cellular (USA); Bell Mobility, Rogers, Telus (Canada); Generic (North America)

Cradlepoint IBR11x0LPE-SP / Sprint (USA)

Cradlepoint IBR11x0LPE-VZ / Verizon (USA

Cradlepoint IBR11x0LP3-EU / Generic (Europe), Telstra (Australia)


Cradlepoint IBR1700-600M / AT&T (T-Mobile, Canada); Sprint, Verizon (USA); Generic (US Cellular (USA), Telstra (AU), Europe, Australia, NZ)



Cradlepoint L950-C7A / AT&T, T-Mobile, Verizon (USA); Generic (North America)

Cradlepoint L950-C7B / Generic (Europe, APAC)

Cradlepoint MC400L2 / Public Safety Band 14 only (USA)

Cradlepoint MC400LPE-AT / AT&T (USA)

Cradlepoint MC400LPE-GN / T-Mobile, US Cellular (USA); Bell Mobility, Rogers, Telus (Canada); Generic (North America)

Cradlepoint MC400LPE-SP / Sprint (USA)

Cradlepoint MC400LPE-VZ / Verizon (USA)

Cradlepoint MC400LP3-EU / Generic (Europe)

Cradlepoint MC400LP4 / AT&T, T-Mobile, Verizon (USA)

Cradlepoint MC400LP5 / Generic (APAC)

Cradlepoint MC400LP6 / AT&T, Sprint, T-Mobile, Verizon (USA); Vodafone (Worldwide), Generic (North America, Europe)

Cradlepoint MC400-600M-C / AT&T, FirstNet (USA)

Cradlepoint MC400-1200M / AT&T, Verizon (USA)

Cradlepoint MC400-1200M-B / AT&T (USA), Verizon (USA); NoAmerica GN (T-Mobile USA, Canada), EuAPAC GN (Europe, Australia)

Cradlepoint R500-PLTE-C7C / PLTE networks (USA)

Cradlepoint R1900-5GB / AT&T, Verizon (USA); Generic (Europe, APAC)

Cradlepoint W1850-5GB / AT&T, Verizon (USA); Generic (Europe, APAC)

Cradlepoint W2000-5GA / Telstra (Australia)




Cradlepoint W4005-5GB / AT&T, Verizon (USA)

NetCloud OS 7.21.70 Release Notes (July 2021)






AER2200

AER1650

AP22

CBA850

CBA550

CR4250


E3000

E300

E100

IBR1700



IBR1100/IBR1150

IBR900/IBR950

IBR600B/IBR650B

IBR600C/IBR650C

IBR200

L950

R500-PLTE

R1900

W1850

W2000

W2005

W4005

New features:


(R1900) Enabled 5 GHz Wi-Fi DFS channel support in all supported regions via Global Optimized Wi-Fi.For more information, please see the following article. https://customer.cradlepoint.com/s/article/Global-Optimized-WLAN


Connection Manager Auto APN algorithm has been updated to support Cellcom and Carolina West wireless operator APNs.

For Cradlepoint cellular adapters operating in Captive Modem mode, the NetCloud LED status will now mirror the NetCloud status of the connected controller.

Display of RF bands now includes only the bands available in the active modem carrier firmware image.

Updated root certificates to match the latest list provided by Mozilla.

Defects fixed:

(E300, E3000) Unable to use hostnames for peers in OpenVPN tunneling configuration.

(E300, E3000) Bluetooth status monitoring service could cause unattended reboot of device.

(E3000, E300) Routers with a large number of VLANs or virtual interfaces might fail to pass traffic.

(E3000) In limited environments, polling on ethernet link status of ports 1-6 might result in stale tasks.

(L950) ttyS1 incorrectly showed up as an option (and default) for the serial port.

(All) Poor throughput performance with OpenVPN tunneling.

(All) Router configured with both IPS and DMVPN resulted in GRE tunnel connection being blocked when an IPS signature was detected.

(All) When using Network Web Filter, non-admin access networks could attempt to reach the admin access IP’s of another network.

(All) Tunnels using certificate authentication with multiple child SA’s could leave some child SA’s permanently down after reboot.

(All) Corrected display of enabled RF bands to only include those bands allowed by current modem firmware image.

(All) Specifying LAN as the source interface for SNMP traffic (including traps) was ignored and instead used the WAN interface as source.

(All) NEMO tunnels failed to build in NetCloud OS 7.21.60 release.


https://customer.cradlepoint.com/s/article/Global-Optimized-WLAN

Security issues:




Known issues:

Scenario:For all endpoints with an embedded 5GB modem and users are monitoring the status of carrier aggregation registration in local UI.

Failure:LTE carrier aggregation registration in local UI status will not be displayed even when carrier aggregation registration is uplinkpresent and active.

Reason for Failure:Modem module level commands that provide carrier aggregation registration status are not working reliably.

Workaround :This will be resolved in a future 5GB modem firmware maintenance release and/or future NetCloud OS release using different modem commands.

NOTE: NetCloud OS 7.2.70 release is the last supported release for the AER1600 router. The AER1650 (non Wi-Fi version) continues to support newer releases.

NOTE: NetCloud OS 7.2.70 release, and newer, no longer officially supports 3rd party USB attached 3G/4G cellular modems. USB cellular modems currently in-use will continue to function, however their support and functionality going forward is no longer guaranteed. 3rd party Ethernet attached modems continue to be supported as "Ethernet WAN" sources only, no support for 3rd party Ethernet modems under Connection Manager modem profiles.































NetCloud OS 7.21.60 Release Notes (June 2021)






AER1650

AER2200

AP22

CBA850

CBA550

CR4250

Cradlepoint Virtual Router (CVR)

E100

E300

E3000

IBR1700

IBR1100/IBR1150



IBR900/IBR950

IBR600B/IBR650B

IBR600C/IBR650C

IBR200

L950

R500-PLTE

R1900

W1850

W2000

W2005

W4005

New features:


(E100, E300, E3000) Wifi-as-WAN now supports operating on DFS channels for all supported Wi-Fi regions.NOTE: wireless connections using DFS channels will take up to 1 minute due to regulatory requirements, and up to 10 minutes on channels 116-128 in regions that use ETSI regulatory rules.

(R1900) Wifi-as-WAN and Wifi-as-Client can now connect and operate on DFS channels in Japan.NOTE: wireless connections using DFS channels in Wifi-as-WAN mode will take 1 minute due to regulatory requirements.

Standard GRE tunneling feature has been expanding to support Ethernet Over GRE (EoGRE) functionality as an Early Access feature.For detailed information on this new feature, please see the following KB article https://customer.cradlepoint.com/s/article/Manual-Internet-GRE-Tunnels

Support for cellular operator to prescribe modem MTU settings via Protocol Configuration Options (PCO).

Router API supports retrieving and setting the MC20BT serial interface baud rate.


Modem connection status in local UI now includes enabled cellular (3G/4G/5G) bands.NOTE: 5GB and 10M-B modems currently do not support this status.

Ability in Connection Manager modem WAN profiles to disable LTE bands 25, 26, and 41 (Sprint legacy bands).NOTE: new UI option only applies to the Cradlepoint LP6 modem.

Router status now includes the MC20BT firmware upgrade status.

Updated WifiSoft configuration in Hotspot Services to reflect current vendor settings.

Defects fixed:

(All) Device NTP server was reporting misleading stratum at boot.

(W2000, W2005, W4005) When in Captive Modem mode not able to use modem SIM slot 2.

(MC400) Improper modem shutdown I/O procedure.

(All) Memory leak in modem driver shim.

(All) Memory leak in dual SIM controller.

(All) Active scanning responses were not properly parsed and merged with the original scan.

(All) Wifi as WAN profiles disappeared when using CA certificates.

(All) Excessive “Invalid Peer” messages in router logs.


https://customer.cradlepoint.com/s/article/Manual-Internet-GRE-Tunnels

https://customer.cradlepoint.com/s/article/Manual-Internet-GRE-Tunnels

(All) Malformed beacons resulting in Wi-Fi clients unable to connect or dropped from router on congested networks.

(All) When using Set System ID and querying original host name the router returns client IP address.

(All) Hot Spot service attempted to start twice.

(All) “Unknown Engine ID” error for certain SNMPv3 configurations.

(All) IPv6 with BGP incorrectly configures default originate for listen range entries.

(All) Authentication error with mixed IPSec MOBIKE configurations.

(All) LAN Gateway maintains NCM connection after LAN configuration change.

(All) Onlink routes from VPN service persist during static route changes.

Security issues:




Known issues:

Scenario:E3000 or E300 experiencing a WAN interface that is rapidly flapping up/down state.

Failure:The affected E3000 or E300 might experience an unattended reboot.

Reason for Failure:TBD

Workaround :Downgrade to any NetCloud OS release prior to 7.21.60. This will be resolved in a future NetCloud OS release.

Scenario:Observe Carrier Aggregation reporting in Status or Diagnostics for 5GB modem.

Failure:Uplink Carrier Aggregation will display "not registered".


Workaround :This will be resolved in a future 5GB modem firmware release.

































NetCloud OS 7.21.50 Release Notes (May 2021)





Products supported/tested:

AER2200

AER1650



AP22

CBA850

CBA550

CR4250


E3000

E300

E100

IBR1700

IBR1100/IBR1150

IBR900/IBR950

IBR600B/IBR650B

IBR600C/IBR650C

IBR200

L950

R500-PLTE

R1900

W2000

W2005

W4005

New features added in this release (Not all features are in all products – see their respective Data Sheets):

Initial production release for the new R1900 endpoint platform. For more information on this new endpoint please visit www.cradlepoint.com



Additional UI/Usability changes:

No UI/usability changes in this release.

Defects fixed:

(IBR1100, IBR200, IBR600B) WiFi as WAN and Wireless Client features would not connect to remote AP's using WPA2 or mixed WPA/WPA2 Enterprise modes.

http://www.cradlepoint.com


(All) IPv6 not allowed when configuring send to server

(E300/E3000) Can now create a VLAN with UID containing a space

Security issues:




Known issues:

Feature: (W2000, W2005, W4005) Captive Modem and Dual SIM Slots

Scenario:5G Branch Adapter configured and operating in Captive modem mode.

Failure:User can not use SIM slot 2, only SIM slot 1.


Workaround :Only use SIM slot 1 until a future NCOS release that resolves this known issue.

Modems tested in this release:







Cradlepoint AER22x0-600M / AT&T (T-Mobile, Canada); Verizon (USA); Generic ( Europe, Australia, NZ)Sprint, US Cellular (USA), Telstra (AU),


























Cradlepoint IBR9x0-600M / AT&T (T-Mobile, Canada); Verizon (USA); Generic ( Europe, Australia, NZ)Sprint, US Cellular (USA), Telstra (AU),









Cradlepoint IBR1700-600M / AT&T (T-Mobile, Canada); Verizon (USA); Generic ( Europe, Australia, NZ)Sprint, US Cellular (USA), Telstra (AU),
























NetCloud OS 7.21.40 Release Notes (April 2021)






AER2200

AER1650

AP22

CBA850

CBA550

CR4250


E3000

E300

E100

IBR1700

IBR1100/IBR1150

IBR900/IBR950

IBR600B/IBR650B

IBR600C/IBR650C

IBR200



L950

R500-PLTE

W2000/W2005


Initial production release for the new L950 endpoint platform. For more information on this new endpoint please visit www.cradlepoint.com

Protocol Independent Multicast - Sparse Mode (PIM SM)

Added madvise support for memory optimization with containers.




Added ability to source GRE tunnels from LAN interfaces.

Added option to force a firmware upgrade for the MC20BT Bluetooth expansion module.For detailed information on this change, please see the following KB article https://customer.cradlepoint.com/s/article/Bluetooth-Low-Energy

MOBIKE is not supported on VTI interfaces, the UI checkbox has been disabled for VTI tunnels in IKEv2.

Improved Auto APN selection algorithm to optimize handling of tower attachment failures.

Defects fixed:

(IBR1100, IBR200, IBR600B) GTK re-key packets would not be retried if the original packets failed.

(All) Potential router reboot when connecting with Smart Operator Selection (S.O.S) feature.

(All) Device/group configuration would not load in NetCloud after deleting a custom SSL certificate.

(E3000, E300) LAN scheduler disabled ports not controlled by LAN scheduler due to sharing the same VLAN.

(All) Captive Portal (Hotspot) feature that reversed how known vs. unknown clients were handled when logging off.

(All) Wi-Fi RADIUS authentication requests using the WAN source when a LAN source was specified.

(All) Occasionally routers failing NetCloud auto-registration when pre-registered will not enter an invalid registration state and retry.

(All) GRE source IP not registering in NHRP and changed source IP to source LAN.

(All) SNMP authentication failures on certain configs and on changes to configs works again.

(All) Enabling "Require HTTPS Connection" under local management caused traffic to be dropped with GRE in tunnel mode IPSec .

(All) Diagnostic ping utility would repeat output.

(All) Disabled GPS/GNSS would re-enable when resetting 150M-D/C4D modems.

Security issues:


MC20BT firmware includes upgrade of Silabs Bluetooth SDK from v2.7 to v3.1 for CVE-2020-26558.


Known issues:



https://customer.cradlepoint.com/s/article/Bluetooth-Low-Energy




Feature: (E3000, E300) VRRP feature

Scenario:VRRP feature configured and combined with uploading data near gigabit speed over multiple TLS connections.

Failure:The device may lockup and require a reboot to recover.


Workaround :This issue was introduced in 7.2.20 release, releases prior are not impacted as a workaround.



Cradlepoint AER16x0LPE-AT /AT&T (USA)

Cradlepoint AER16x0LPE-GN /T-Mobile, US Cellular (USA);Generic (North America)

Cradlepoint AER16x0LPE-SP /Sprint (USA)

Cradlepoint AER16x0LPE-VZ /Verizon (USA)

Cradlepoint AER16x0LP4 /AT&T, T-Mobile, Verizon (USA)

Cradlepoint AER22x0-600M / AT&T (T-Mobile, Canada); Verizon (USA); Generic ( Europe, Australia, NZ)Sprint, US Cellular (USA), Telstra (AU),













Cradlepoint IBR6x0B-LP4 /AT&T, T-Mobile, Verizon (USA)

Cradlepoint IBR6x0C-LPE-AT /AT&T (USA)

Cradlepoint IBR6x0C-LPE-GN /T-Mobile (USA);Generic (North America)

Cradlepoint IBR6x0C-LPE-SP/Sprint (USA)

Cradlepoint IBR6x0C-LPE-VZ /Verizon (USA)




Cradlepoint IBR900LPE-VZ /Verizon (USA); also certified on AT&T (USA), Sprint (USA), and Generic (North America)

Cradlepoint IBR9x0LP5 /Generic (APAC)

Cradlepoint IBR9x0LP6 /AT&T, Sprint, T-Mobile, Verizon (USA); Generic (North America, Europe)




Cradlepoint IBR11x0LPE-AT /AT&T (USA)

Cradlepoint IBR11x0LPE-GN /C-Spire, T-Mobile, US Cellular (USA); Bell Mobility, Rogers, Telus (Canada); Generic (North America)

Cradlepoint IBR11x0LPE-SP /Sprint (USA)

Cradlepoint IBR11x0LPE-VZ /Verizon (USA

Cradlepoint IBR11x0LP3-EU /Generic (Europe), Telstra (Australia)





Cradlepoint L950-C7A /AT&T, T-Mobile, Verizon (USA); Generic (North America)


Cradlepoint MC400L2 /Public Safety Band 14 only (USA)

Cradlepoint MC400LPE-AT /AT&T (USA)

Cradlepoint MC400LPE-GN /T-Mobile, US Cellular (USA); Bell Mobility, Rogers, Telus (Canada); Generic (North America)

Cradlepoint MC400LPE-SP /Sprint (USA)

Cradlepoint MC400LPE-VZ /Verizon (USA)

Cradlepoint MC400LP3-EU /Generic (Europe)

Cradlepoint MC400LP4 /AT&T, T-Mobile, Verizon (USA)

Cradlepoint MC400LP5 /Generic (APAC)

Cradlepoint MC400LP6 /AT&T, Sprint, T-Mobile, Verizon (USA); Vodafone (Worldwide), Generic (North America, Europe)

Cradlepoint MC400-600M-C /AT&T, FirstNet (USA)



Cradlepoint R500-PLTE-C7C /PLTE networks (USA)

Cradlepoint W2000-5GA /Telstra (Australia)


NetCloud OS 7.21.30 Release Notes (March 2021)

Availability and entitlement to NetCloud OS releases requires an active Cradlepoint NetCloud Service subscription. For more information about the Cradlepoint NetCloud Service click . HERE

Regarding NetCloud OS manual download availability: NetCloud OS (NCOS) releases 7.1.0 and greater are no longer available for manual or offline download. NCOS upgrades are performed via NetCloud Manager with an active NetCloud Service subscription. For more information and NCOS upgrade best practices click . HERE






AER2200

AER1650

AP22

CBA850

CBA550

CR4250


E3000

E300

E100

IBR1700

IBR1100/IBR1150

IBR900/IBR950

IBR600B/IBR650B

IBR600C/IBR650C

IBR200

R500-PLTE

W2000/W2005


Initial production release for the new R500-PLTE endpoint platform. For more information on this new endpoint please visit www.cradlepoint.com




http://www.cradlepoint.com/

http://www.cradlepoint.com/

No new UI/usability changes in this release.

Defects fixed:

(E3000, E300) VRRP feature, shortened master-backup transition times that took too long under some conditions.

(E100) Wi-Fi LED now turns off when both Wi-Fi radios are disabled.

(5G Modems) Demoted non-fatal MHI error logs that show up during carrier switching.

(E3000) Ethernet link speed on port 1 is now correct when auto-negotiating with a device capable of less than 1000FD.

(MC20BT) Serial numberis now correctly populated in status tree.

(IBR1100) Failure to re-connect WiFi as WAN/Wireless client.

(All) Static Multicast could fail to resolve non-UID devices and not apply config for interfaces not ready on boot.Prevent Static Multicast from adding broad allow rules when interface was not available for broadcast group.

(All) SNMPv3 was unavailable for Branch Continuity adapters.

(All) BGP using listen range and IPv6 resulted in routes not being exchanged.

Security issues:


Upgraded dnsmasq to stable v2.83 for CVE-2020-25681 through CVE-25687 (seven total)


Known issues:

Feature: (E3000, E300) VRRP feature

Scenario:VRRP feature configured and combined with uploading data near gigabit speed over multiple TLS connections.

Failure:The device may lockup and require a reboot to recover.


Workaround :This issue was introduced in 7.2.20 release, releases prior are not impacted as a workaround.



Cradlepoint AER1650LPE-AT /AT&T (USA)

Cradlepoint AER1650LPE-GN /T-Mobile, US Cellular (USA);Generic (North America)

Cradlepoint AER1650LPE-SP /Sprint (USA)

Cradlepoint AER1650LPE-VZ /Verizon (USA)

Cradlepoint AER1650LP4 /AT&T, T-Mobile, Verizon (USA)

Cradlepoint AER2200-600M / AT&T (T-Mobile, Canada); Verizon (USA); Generic ( Europe, Australia, NZ)Sprint, US Cellular (USA), Telstra (AU),
















NetCloud OS 7.21.20 Release Notes (February 2021)






AER2200

AER1650

AP22

CBA850

CBA550

CR4250


E3000

E300

E100

IBR1700

IBR1100/IBR1150

IBR900/IBR950



IBR600B/IBR650B

IBR600C/IBR650C

IBR200

W2000/W2005


No new features in this release.




The ability to migrate Sprint Curiosity SIMs to the T-Mobile network is now supported in the IBR200-10M-C platform.

Defects fixed:

(All) Connection Manager "Unrecognized password format" error after profile configuration.

(All) Tunnel interfaces bound to WANs with static routes and auto gateway in certain cases failed to add route on WAN change.

(E100, E300, E3000) Adding NetCloud Perimeter gateway client when network web filter configured no longer requires a reboot to access local UI via NetCloud Perimeter IP.

Security issues:


Upgraded OpenSSL library to 1.1.1h.


Known issues:

Feature: (All) SNMP Queries (GETs)Scenario:

A user tries to get information from router using CLI commands like 'snmpwalk' and 'snmpget'.

The protocol used is SNMPv3 and the security level used is 'authPriv'

Failure:The query request is rejected by the SNMP agent running in the router.

Reason for Failure:The SNMP agent running in the router does not support 'authPriv' security level.

Even though the 'SNMP Configuration' on the router allows for security level 'authPriv', it is supported only for the 'Alert Notifications using SNMP' feature.

Workaround :Use the supported security levels only - noAuthNoPriv or authNoPriv

Feature: (All) Wi-Fi client radiosScenario:

A race condition could cause Wi-Fi radio startup failover on router boot.



Failure:Wi-Fi radios will not beacon. The system log will contain a message "CRIT root Service start exception: wireless."

Workaround:The router must be rebooted to restart and recover Wi-Fi radios.


























































NetCloud OS 7.21.10 Release Notes (January 2021)




NOTE:The exception to this approximate file size is the CR4250, which can have update file sizes up to 150MB.


AER2200



AER1650

AP22

CBA850

CBA550

CR4250


E3000

E300

E100

IBR1700

IBR1100/IBR1150

IBR900/IBR950

IBR600B/IBR650B

IBR600C/IBR650C

IBR200

W2000/W2005


Initial production release for the new MC20BT Bluetooth Low Energy 5.1 optional accessory (only supported on E300 Series, E3000 Series).

See accessory data sheet for full specifications and details on the MC20BT.

For detailed information on this new accessory, please see the following KB article https://customer.cradlepoint.com/s/article/Bluetooth-Low-Energy

Added support for MQTT data collection from wired, wireless, or bluetooth connected devices.For detailed information on this new feature, please see the following KB article https://customer.cradlepoint.com/s/article/MQTT-Server-Configuration

NOTE:NetCloud OS 7.2.70 release is the last supported release for the AER1600 router. The AER1650 (non Wi-Fi version) continues to support newer releases.

NOTE:NetCloud OS 7.2.70 release, and newer, no longer officially support USB attached 3rd party 3G/4G cellular modems. USB cellular modems currently in-use will continue to function, however their support going forward is no longer guaranteed.


No UI/usability changes in this release.

Defects fixed:

(Models with C4D, 150M-D modems) Integrated a workaround to address mis-configuration of the modem's carrier settings on a carrier switch event.

(All) SDK application failed to run due to permission errors.

(All) NEMO tunnels will successfully establish but fail to pass traffic.



https://customer.cradlepoint.com/s/article/MQTT-Server-Configuration

https://customer.cradlepoint.com/s/article/MQTT-Server-Configuration

(E300, E3000) Forcing ethernet link speed when paired with some switch manufacturers resulted in degraded performance.

(All) Configuring SNMPv3 with SHA and AuthPriv does not work as expected.

(All) Cannot use GRE key of 0 when configuring DMVPN.

Security issues:

Note: All customers are reminded that are necessary for router and network changing the default Administration (login) and WiFi passwordssecurity. The default passwords are unique, but are not as safe as a strong password that only you know. The security of the Internet depends on your cooperation.

CVE-2018-18066 NULL pointer vulnerability in NET-SNMP addressed.

CVE-2020-12762 integer overflow and out-of-bounds write via a large JSON file in json-c addressed.

Cradlepoint Severity:LowCVE-2018-18066 NULL pointer vulnerability in NET-SNMP addressed.

Affected Feature: SNMP (disabled by default)

Add copy about Security & Trust and link to web page https://cradlepoint.com/about-us/trust/

Known issues:

Feature: SNMP Queries (GETs)Scenario:

A user tries to get information from router using CLI commands like 'snmpwalk' and 'snmpget'.

The protocol used is SNMPv3 and the security level used is 'authPriv'

Failure:The query request is rejected by the SNMP agent running in the router.

Reason for Failure:The SNMP agent running in the router does not support 'authPriv' security level.

Even though the 'SNMP Configuration' on the router allows for security level 'authPriv', it is supported only for the 'Alert Notifications using SNMP' feature.

Workaround :Use the supported security levels only - noAuthNoPriv or authNoPriv

IBR1100 WiFi as WAN or Wireless Client modesScenario:

If a user makes WiFi configuration changes in the local Router UI.

Failure:WiFi radio will crash.

Reason for Failure:Unable to get scan results need for WiFi as WAN/Wireless Client connection.

Workaround:Per best practice, use NetCloud Manager to make all configuration changes.











Release Notes NCOS 7.21 - d2c9o94y5j661e.cloudfront.net

Documents

Transcript of Release Notes NCOS 7.21 - d2c9o94y5j661e.cloudfront.net